We\'ve encrypted our web.configs in all of our ASP.NET Web Forms apps (ranging from ASP.NET 2.0 to 4.0, both older-style Web Sites and newer Web Applications), using the fol